Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa
File:                     3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa (raw, json)
Hash identifier:          jG5zUo11VXomV+8oGriEiuUASIjKVwewiwnHWDS5ByY=
Subject key identifier:   20:CC:99:AD:31:83:13:81:DF:78:AE:7B:87:4F:6E:CD:14:D1:54:60
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       528471F6D6DDDDACC4A7DD5EA7EB9E2B1BF35225
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:29 +0000
ROA not before:           Wed 03 Apr 2024 21:08:29 +0000
ROA not after:            Wed 02 Apr 2025 21:13:29 +0000
asID:                     263073
IP address blocks:        177.223.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:84:71:f6:d6:dd:dd:ac:c4:a7:dd:5e:a7:eb:9e:2b:1b:f3:52:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:29 2024 GMT
            Not After : Apr  2 21:13:29 2025 GMT
        Subject: CN=20CC99AD31831381DF78AE7B874F6ECD14D15460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:4b:af:0f:5e:b4:fd:8f:7f:7b:c5:22:40:
                    96:39:ea:be:5c:33:ef:b4:ff:ca:bc:6b:3d:18:e2:
                    f4:ed:77:9b:a1:b0:e7:bb:f7:45:9c:43:8c:77:e9:
                    8f:56:47:e0:5b:32:22:c0:a3:50:d3:07:59:bf:77:
                    2a:b5:d0:cb:8e:17:60:70:fb:8e:51:94:cf:93:af:
                    a5:d4:1b:5d:f0:78:ff:c0:df:87:7a:bb:c3:5e:bf:
                    fa:78:f9:3a:bc:e7:7b:b3:30:35:a8:ce:e7:cc:81:
                    0f:f6:1e:91:6c:7d:d0:6d:a2:91:e8:b5:0c:b5:75:
                    06:46:04:66:58:18:99:a6:c6:75:fa:3f:ec:ed:c2:
                    b6:a5:38:97:21:dd:98:d4:76:3c:ce:57:d4:67:79:
                    99:9c:b8:f8:11:b3:d6:30:6e:43:32:66:64:b2:3b:
                    00:a2:25:b4:3f:ab:d0:4a:fc:f2:ad:82:14:c6:a4:
                    c7:62:97:a5:01:6b:4d:9b:e5:0e:4c:be:ae:d8:f0:
                    2c:70:58:b0:5e:ce:2c:0d:da:57:05:57:db:81:53:
                    19:79:bd:49:dd:af:be:86:f4:ba:df:e8:f5:d0:47:
                    10:97:6c:dc:6e:63:28:75:42:2a:ed:05:c8:65:c5:
                    31:89:57:8d:cc:e1:19:57:dc:47:78:de:cf:81:b1:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CC:99:AD:31:83:13:81:DF:78:AE:7B:87:4F:6E:CD:14:D1:54:60
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e31362e302f32302d3230203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:d1:d1:6d:6c:4b:ec:d9:9b:50:75:b3:50:6b:8c:d5:b8:2f:
         b4:15:0c:cd:7b:99:20:a5:40:47:10:cb:83:b3:47:c3:12:be:
         f4:21:27:d0:bd:56:6d:bb:41:4f:2e:61:57:42:82:34:79:0b:
         18:a1:be:fd:25:63:4b:d6:22:e0:0e:64:cc:9a:65:1e:e1:fb:
         07:99:42:ab:b8:f1:25:af:cd:f3:b2:9c:26:9b:24:25:8c:1d:
         4d:ac:6d:da:5f:bc:6b:e6:8b:98:3c:41:4a:40:bd:49:de:6e:
         4d:64:17:e7:bc:25:2d:83:1d:dc:72:0e:41:47:50:33:7b:76:
         74:cc:d5:71:d9:16:17:d4:e4:b5:b3:e8:02:53:ca:fc:d4:ff:
         29:31:db:38:1f:98:e3:90:52:82:99:9c:78:3b:63:64:5b:ed:
         92:18:cc:4b:c2:41:62:a6:f2:f2:36:18:11:05:1e:28:23:de:
         d0:83:b2:20:c3:3b:6a:79:a7:7b:72:27:c4:f1:2f:db:a2:ce:
         2f:fa:d6:38:29:ec:b3:e5:f4:76:c5:24:7f:76:cd:51:ea:8d:
         41:65:72:d5:99:8d:ea:67:14:5a:b1:36:29:73:c8:0f:ce:77:
         d9:ff:28:32:46:34:56:70:11:01:0b:24:4e:38:27:6c:6b:44:
         ae:c3:93:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:49:00 2024 by rpki-client on console-fra.rpki-client.org